$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa File: 876582d6-fa70-3b03-9ce4-1d237ac385b7.roa (raw, json) Hash identifier: 45qCtvDe59ATITzsuWRAmHQhzc3NBFADL8Hz1baZf2Q= Subject key identifier: AA:0E:16:40:74:A7:4E:07:AE:C1:BD:5E:23:F2:F6:51:E6:68:90:5D Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Certificate serial: 010D0C9F4328584F06724142429F3BAFCEB24400 Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2607:28c0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:41:42:42:9f:3b:af:ce:b2:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=4386f8c4-0354-4460-8e57-5ee63d886943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:73:a4:88:84:2e:1c:29:9b:25:e9:52:3c: 3c:7f:e6:b2:41:67:7e:1c:f5:38:78:4f:17:4b:dd: 03:a0:83:86:c2:3b:ee:44:fa:95:5c:64:54:42:11: d4:47:2f:d4:5a:92:23:f5:a8:82:6f:1d:be:62:80: 74:3c:43:39:a2:3c:46:3e:5d:da:c5:24:f2:2e:c2: 39:0a:35:20:e6:f3:aa:04:67:31:8c:5c:df:e1:ab: ee:4c:ae:38:1e:0c:9a:bd:28:30:70:69:f7:da:ad: ff:31:5f:0b:4e:97:9c:1b:3e:67:06:d2:ad:c3:ca: 0a:92:1a:8c:b7:a9:f4:df:8a:0c:4a:6f:29:a1:c8: a5:6e:27:a8:b2:4b:47:b2:68:36:20:02:61:c2:69: 6d:a5:23:e3:60:2f:8e:ef:95:57:4a:60:64:47:89: c1:f7:ab:a3:d2:13:2a:61:8b:6b:0e:d2:45:8f:f3: 34:41:1c:c8:be:01:63:41:2b:42:ad:9a:3a:1c:2e: 3c:f4:30:0c:02:4a:3f:04:63:4b:63:df:fa:d3:e0: 40:7d:61:28:2a:24:72:ad:1a:95:62:c0:4a:76:45: 95:de:ae:f5:6e:79:31:03:99:b3:fb:c6:43:87:97: e9:b4:74:fa:4b:75:0b:6c:83:32:c3:a6:17:cc:97: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0E:16:40:74:A7:4E:07:AE:C1:BD:5E:23:F2:F6:51:E6:68:90:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl X509v3 Authority Key Identifier: keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer sbgp-ipAddrBlock: critical IPv6: 2607:28c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e2:ed:90:1f:46:6e:4f:e3:a2:a7:e8:54:67:97:76:77:2e: 6d:94:b9:fc:41:c3:e1:14:70:42:16:9b:7b:73:85:73:c4:2c: 81:40:98:03:60:90:8e:0a:9d:9d:d7:53:b6:9d:39:fa:45:a4: 71:ad:10:13:36:1e:96:4e:24:fd:22:d3:91:a7:80:d1:c2:57: 4b:5c:36:e2:5a:92:3e:c5:82:94:be:53:76:99:5e:81:c5:4b: 77:a6:f2:da:6a:5b:d9:83:36:43:26:d7:e3:63:de:ce:6b:81: 0c:e8:ac:d6:1c:61:5e:8c:e1:a1:90:f0:2c:2c:f8:84:ce:87: ea:16:c2:3e:3a:42:30:37:26:62:1b:c1:69:9d:c1:18:4c:aa: da:ed:d4:ce:4a:ec:d7:52:8d:96:06:a1:0d:3d:72:d9:e0:f7: 16:2f:82:ba:d6:e3:58:a7:de:58:b7:fd:dc:2d:00:b6:a1:13: eb:a5:8e:b5:4e:c7:50:88:22:3c:2f:84:7d:10:fa:07:31:e5: 57:dd:08:fa:10:d3:50:cd:4c:25:e8:2b:2b:e1:3c:6b:70:84: 67:6b:c4:8b:cd:d3:f1:a1:5e:93:9d:ba:50:ab:bb:5b:fb:c2: 40:a7:e9:3d:53:f0:06:c1:6a:fc:25:25:25:6c:49:e4:c7:05: f6:f9:6c:82 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8GckFCQp87r86yRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz YjU3MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDM4NmY4YzQtMDM1NC00NDYwLThlNTctNWVlNjNkODg2OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pFzpIiELhwpmyXpUjw8f+ayQWd+HPU4eE8X S90DoIOGwjvuRPqVXGRUQhHURy/UWpIj9aiCbx2+YoB0PEM5ojxGPl3axSTyLsI5 CjUg5vOqBGcxjFzf4avuTK44HgyavSgwcGn32q3/MV8LTpecGz5nBtKtw8oKkhqM t6n034oMSm8pocilbieosktHsmg2IAJhwmltpSPjYC+O75VXSmBkR4nB96uj0hMq YYtrDtJFj/M0QRzIvgFjQStCrZo6HC489DAMAko/BGNLY9/60+BAfWEoKiRyrRqV YsBKdkWV3q71bnkxA5mz+8ZDh5fptHT6S3ULbIMyw6YXzJdDKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKoOFkB0p04HrsG9XiPy9lHmaJBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1 ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvODc2NTgyZDYtZmE3MC0z YjAzLTljZTQtMWQyMzdhYzM4NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2 OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3 M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi MTQ4NzNiNTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgcowAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlOLtkB9Gbk/joqfoVGeXdncubZS5/EHD4RRwQhabe3OFc8QsgUCY A2CQjgqdnddTtp05+kWkca0QEzYelk4k/SLTkaeA0cJXS1w24lqSPsWClL5Tdple gcVLd6by2mpb2YM2QybX42PezmuBDOis1hxhXozhoZDwLCz4hM6H6hbCPjpCMDcm YhvBaZ3BGEyq2u3Uzkrs11KNlgahDT1y2eD3Fi+CutbjWKfeWLf93C0AtqET66WO tU7HUIgiPC+EfRD6BzHlV90I+hDTUM1MJegrK+E8a3CEZ2vEi83T8aFek526UKu7 W/vCQKfpPVPwBsFq/CUlJWxJ5McF9vlsgg== -----END CERTIFICATE-----Generated at Sat Sep 12 11:29:23 2026 by rpki-client